Skip to content

chore(deps): update all dependencies#191

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all
Open

chore(deps): update all dependencies#191
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Feb 19, 2026

This PR contains the following updates:

Package Type Update Change Age Confidence
aquasecurity/trivy-action action patch 0.34.00.34.2 age confidence
cert-manager/cert-manager patch 1.19.31.19.4 age confidence
gcr.io/distroless/static final digest 01e550ff512d81
github.com/open-telemetry/opentelemetry-operator require minor v0.144.0v0.145.0 age confidence
go.opentelemetry.io/collector/component require minor v1.50.0v1.53.0 age confidence
go.opentelemetry.io/collector/config/configauth require minor v1.50.0v1.53.0 age confidence
go.opentelemetry.io/collector/config/configcompression require minor v1.50.0v1.53.0 age confidence
go.opentelemetry.io/collector/config/configopaque require minor v1.50.0v1.53.0 age confidence
go.opentelemetry.io/collector/config/configtelemetry require minor v0.142.0v0.147.0 age confidence
go.opentelemetry.io/collector/otelcol require minor v0.142.0v0.147.0 age confidence
go.opentelemetry.io/collector/pipeline require minor v1.50.0v1.53.0 age confidence
go.opentelemetry.io/collector/service require minor v0.142.0v0.147.0 age confidence
k8s.io/api require patch v0.35.1v0.35.2 age confidence
k8s.io/apimachinery require patch v0.35.1v0.35.2 age confidence
k8s.io/client-go require patch v0.35.1v0.35.2 age confidence
opentelemetry-operator (source) minor 0.105.10.106.0 age confidence
sigs.k8s.io/controller-runtime require minor v0.22.5v0.23.1 age confidence

Release Notes

aquasecurity/trivy-action (aquasecurity/trivy-action)

v0.34.2

Compare Source

What's Changed

New Contributors

Full Changelog: aquasecurity/trivy-action@0.34.1...0.34.2

v0.34.1

Compare Source

What's Changed

Full Changelog: aquasecurity/trivy-action@0.34.0...0.34.1

cert-manager/cert-manager (cert-manager/cert-manager)

v1.19.4

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

v1.19.4 is a simple patch release to fix some reported vulnerabilities - notably CVE-2026-24051 and CVE-2025-68121. All users should upgrade.

Changes by Kind

Bug or Regression
open-telemetry/opentelemetry-operator (github.com/open-telemetry/opentelemetry-operator)

v0.145.0

Compare Source

0.145.0

🛑 Breaking changes 🛑
  • collector: Remove operator.collector.default.config feature gate (#​4473)
🚀 New components 🚀
  • clusterObservability: Inital implementation of ClusterObservability CRD (#​3820)
    This change provides an initial implementation of the Cluster Observability CRD and operator control loop.
    Reconcilation is disabled by default.
    Currently, the CRD is not included in the operator bundle and must be installed manually.
    To enable reconciliation, enable the --feature-gates=+operator.clusterobservability feature gate.
💡 Enhancements 💡
  • target allocator: Add readiness and liveness probe configurations for target allocator CRD (#​4639)
  • target allocator: Make the least-weighted target allocation strategy take job name into account. (#​3128)
    Uses job name instead of "first match" to when number of targets is equal. The effect is to spread out targets with the same job name across collectors.
🧰 Bug fixes 🧰
  • target allocator: Fix TLS certificate hot-reload for mTLS connections (#​4368)
    The Target Allocator now automatically reloads TLS certificates when they are renewed
    by cert-manager. Previously, certificate renewals required a pod restart because
    certificates were only loaded once at startup. The fix uses fsnotify to watch the
    certificate directory and dynamically reloads certificates via the GetCertificate
    callback, enabling seamless certificate rotation without downtime.

  • collector: Configure collector to reload client certificate periodically (#​4657)
    When the collector connects to the target allocator over mTLS, certificates were not automatically reloaded after expiration. This adds reload_interval to the TLS configuration, enabling the Prometheus receiver to periodically reload certificates from disk.

    The default interval of 5 minutes provides a good balance between picking up renewed certificates promptly and avoiding unnecessary overhead.

  • operator: Set Kubernetes API server egress network policy port dynamically. (#​4411)
    The operator network policy egress rule for the Kubernetes API server was hardcoded to port 6443.
    This PR uses uses endpointslices.discovery.k8s.io -n default kubernetes to get the port and IP addresses of the Kubernetes API server
    for the operator egress network policy.

Components
open-telemetry/opentelemetry-collector (go.opentelemetry.io/collector/component)

v1.53.0

💡 Enhancements 💡
  • exporter/debug: Output bucket counts for exponential histogram data points in normal verbosity. (#​10463)
  • pkg/exporterhelper: Add metadata_keys configuration to sending_queue.batch.partition to partition batches by client metadata (#​14139)
    The metadata_keys configuration option is now available in the sending_queue.batch.partition section for all exporters.
    When specified, batches are partitioned based on the values of the listed metadata keys, allowing separate batching per metadata partition. This feature
    is automatically configured when using exporterhelper.WithQueue().
🧰 Bug fixes 🧰
  • cmd/builder: Fix duplicate error output when CLI command execution fails in the builder tool. (#​14436)

  • cmd/mdatagen: Fix duplicate error output when CLI command execution fails in the mdatagen tool. (#​14436)

  • cmd/mdatagen: Fix semconv URL validation for metrics with underscores in their names (#​14583)
    Metrics like system.disk.io_time now correctly validate against semantic convention URLs containing underscores in the anchor tag.

  • extension/memory_limiter: Use ChainUnaryInterceptor instead of UnaryInterceptor to allow multiple interceptors. (#​14634)
    If multiple extensions that use the UnaryInterceptor are set the binary panics at start time.

  • extension/memory_limiter: Add support for streaming services. (#​14634)

  • pkg/config/configmiddleware: Add context.Context to HTTP middleware interface constructors. (#​14523)
    This is a breaking API change for components that implement or use extensionmiddleware.

  • pkg/confmap: Fix another issue where configs could fail to decode when using interpolated values in string fields. (#​14034)
    For example, a resource attribute can be set via an environment variable to a string that is parseable as a number, e.g. 1234.

    (A similar bug was fixed in a previous release: that one was triggered when the field was nested in a struct,
    whereas this one is triggered when the field internally has type "pointer to string" rather than "string".)

  • pkg/otelcol: The featuregate subcommand now rejects extra positional arguments instead of silently ignoring them. (#​14554)

  • pkg/queuebatch: Fix data race in partition_batcher where resetTimer() was called outside mutex, causing concurrent timer.Reset() calls and unpredictable batch flush timing under load. (#​14491)

  • pkg/scraperhelper: Log scrapers now emit log-appropriate receiver telemetry (#​14654)
    Log scrapers previously emitted the same receiver telemetry as metric scrapers,
    such as the otelcol_receiver_accepted_metric_points metric (instead of otelcol_receiver_accepted_log_records),
    or spans named receiver/myreceiver/MetricsReceived (instead of receiver/myreceiver/LogsReceived).

    This did not affect scraper-specific spans and metrics.

  • processor/batch: Fixes a bug where the batch processor would not copy SchemaUrl metadata from resource and scope containers during partial batch splits. (#​12279, #​14620)

v1.52.0

v1.51.0

💡 Enhancements 💡
  • pkg/scraperhelper: ScraperID has been added to the logs for metrics, logs, and profiles (#​14461)
🧰 Bug fixes 🧰
  • exporter/otlp_grpc: Fix the OTLP exporter balancer to use round_robin by default, as intended. (#​14090)

  • pkg/config/configoptional: Fix Unmarshal methods not being called when config is wrapped inside Optional (#​14500)
    This bug notably manifested in the fact that the sending_queue::batch::sizer config for exporters
    stopped defaulting to sending_queue::sizer, which sometimes caused the wrong units to be used
    when configuring sending_queue::batch::min_size and max_size.

    As part of the fix, xconfmap exposes a new xconfmap.WithForceUnmarshaler option, to be used in the Unmarshal methods
    of wrapper types like configoptional.Optional to make sure the Unmarshal method of the inner type is called.

    The default behavior remains that calling conf.Unmarshal on the confmap.Conf passed as argument to an Unmarshal
    method will skip any top-level Unmarshal methods to avoid infinite recursion in standard use cases.

  • pkg/confmap: Fix an issue where configs could fail to decode when using interpolated values in string fields. (#​14413)
    For example, a header can be set via an environment variable to a string that is parseable as a number, e.g. 1234

  • pkg/service: Don't error on startup when process metrics are enabled on unsupported OSes (e.g. AIX) (#​14307)

kubernetes/api (k8s.io/api)

v0.35.2

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.35.2

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.35.2

Compare Source

open-telemetry/opentelemetry-helm-charts (opentelemetry-operator)

v0.106.0

Compare Source

OpenTelemetry Operator Helm chart for Kubernetes

What's Changed

New Contributors

Full Changelog: open-telemetry/opentelemetry-helm-charts@opentelemetry-collector-0.146.0...opentelemetry-operator-0.106.0


opentelemetry-operator 0.106.0

What's Changed

This release updates the opentelemetry-operator to version 0.145.0.

OpenTelemetry Release Notes

Chart Information

  • Chart Version: 0.106.0
  • App Version: 0.145.0
  • Chart Path: charts/opentelemetry-operator/
kubernetes-sigs/controller-runtime (sigs.k8s.io/controller-runtime)

v0.23.1

Compare Source

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.23.0...v0.23.1

v0.23.0

Compare Source

🔆 Highlights

⚠️ Breaking changes

  • Dependencies: Update to k8s.io/* v1.35 by @​alvaroaleman @​dongjiang1989 @​kannon92 (#​3316, #​3349, #​3386, #​3391, #​3401)
  • Client: Add subresource Apply support by @​alvaroaleman in #​3321
  • Events: Migration to the new events API by @​clebs in #​3262
    • Using the new GetEventRecorderFor requires updating your rbac for events to use the events.k8s.io apiGroup rather than the `` (core) apiGroup
  • Fakeclient: Set ResourceVersion for SSA Create by @​alvaroaleman in #​3311
  • Webhooks: Generic Validator and Defaulter by @​alvaroaleman in #​3360
    • Existing code of the form builder.WebhookManagedBy(mgr).For(&corev1.Deployment{}) has to be changed to builder.WebhookManagedBy(mgr, &appsv1.Deployment{})
    • Existing webhook implementations have to be changed to take the concrete object rather than runtime.Object, for example from ValidateCreate(ctx context.Context, obj runtime.Object) (admission.Warnings, error) to ValidateCreate(ctx context.Context, obj *appsv1.Deployment) (admission.Warnings, error)

✨ Features

🐛 Bugfixes

🌱 Other

📖 Documentation

Dependencies

Added
  • github.com/Masterminds/semver/v3: v3.4.0
  • github.com/gkampitakis/ciinfo: v0.3.2
  • github.com/gkampitakis/go-diff: v1.3.2
  • github.com/gkampitakis/go-snaps: v0.5.15
  • github.com/goccy/go-yaml: v1.18.0
  • github.com/joshdk/go-junit: v1.0.0
  • github.com/maruel/natural: v1.1.1
  • github.com/mfridman/tparse: v0.18.0
  • github.com/tidwall/gjson: v1.18.0
  • github.com/tidwall/match: v1.1.1
  • github.com/tidwall/pretty: v1.2.1
  • github.com/tidwall/sjson: v1.2.5
  • go.uber.org/automaxprocs: v1.6.0
  • golang.org/x/tools/go/expect: v0.1.0-deprecated
  • golang.org/x/tools/go/packages/packagestest: v0.1.1-deprecated
Changed
  • github.com/go-logr/logr: v1.4.2 → v1.4.3
  • github.com/google/pprof: d1b30fe → 27863c8
  • github.com/onsi/ginkgo/v2: v2.22.0 → v2.27.2
  • github.com/onsi/gomega: v1.36.1 → v1.38.2
  • github.com/prometheus/client_golang: v1.22.0 → v1.23.2
  • github.com/prometheus/client_model: v0.6.1 → v0.6.2
  • github.com/prometheus/common: v0.62.0 → v0.66.1
  • github.com/prometheus/procfs: v0.15.1 → v0.16.1
  • github.com/rogpeppe/go-internal: v1.13.1 → v1.14.1
  • github.com/spf13/cobra: v1.9.1 → v1.10.0
  • github.com/spf13/pflag: v1.0.6 → v1.0.9
  • github.com/stretchr/testify: v1.10.0 → v1.11.1
  • go.etcd.io/bbolt: v1.4.2 → v1.4.3
  • go.etcd.io/etcd/api/v3: v3.6.4 → v3.6.5
  • go.etcd.io/etcd/client/pkg/v3: v3.6.4 → v3.6.5
  • go.etcd.io/etcd/client/v3: v3.6.4 → v3.6.5
  • go.etcd.io/etcd/pkg/v3: v3.6.4 → v3.6.5
  • go.etcd.io/etcd/server/v3: v3.6.4 → v3.6.5
  • go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.58.0 → v0.61.0
  • go.opentelemetry.io/otel/metric: v1.35.0 → v1.36.0
  • go.opentelemetry.io/otel/sdk/metric: v1.34.0 → v1.36.0
  • go.opentelemetry.io/otel/sdk: v1.34.0 → v1.36.0
  • go.opentelemetry.io/otel/trace: v1.35.0 → v1.36.0
  • go.opentelemetry.io/otel: v1.35.0 → v1.36.0
  • go.yaml.in/yaml/v2: v2.4.2 → v2.4.3
  • golang.org/x/crypto: v0.36.0 → v0.45.0
  • golang.org/x/mod: v0.21.0 → v0.29.0
  • golang.org/x/net: v0.38.0 → v0.47.0
  • golang.org/x/oauth2: v0.27.0 → v0.30.0
  • golang.org/x/sync: v0.12.0 → v0.18.0
  • golang.org/x/sys: v0.31.0 → v0.38.0
  • golang.org/x/telemetry: bda5523078029d
  • golang.org/x/term: v0.30.0 → v0.37.0
  • golang.org/x/text: v0.23.0 → v0.31.0
  • golang.org/x/tools: v0.26.0 → v0.38.0
  • golang.org/x/xerrors: 5ec99f89bdfabe
  • google.golang.org/genproto/googleapis/rpc: a0af3ef200df99
  • google.golang.org/grpc: v1.72.1 → v1.72.2
  • google.golang.org/protobuf: v1.36.5 → v1.36.8
  • gopkg.in/evanphx/json-patch.v4: v4.12.0 → v4.13.0
  • k8s.io/api: v0.34.0 → v0.35.0
  • k8s.io/apiextensions-apiserver: v0.34.0 → v0.35.0
  • k8s.io/apimachinery: v0.34.0 → v0.35.0
  • k8s.io/apiserver: v0.34.0 → v0.35.0
  • k8s.io/client-go: v0.34.0 → v0.35.0
  • k8s.io/code-generator: v0.34.0 → v0.35.0
  • k8s.io/component-base: v0.34.0 → v0.35.0
  • k8s.io/gengo/v2: 85fd79dec3ebc5
  • k8s.io/kms: v0.34.0 → v0.35.0
  • k8s.io/kube-openapi: f3f2b99589584f
  • k8s.io/utils: 4c0f3b2bc988d5
  • sigs.k8s.io/json: cfa47c32d32026
Removed
  • github.com/kisielk/errcheck: v1.5.0
  • github.com/kisielk/gotool: v1.0.0
  • gopkg.in/yaml.v2: v2.4.0

New Contributors

Full Changelog: kubernetes-sigs/controller-runtime@v0.22.0...v0.23.0

Thanks to all our contributors! 😊


Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) in timezone Etc/UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Feb 19, 2026
@renovate
Copy link
Contributor Author

renovate bot commented Feb 19, 2026

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 58 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.0 -> 1.25.3
github.com/go-openapi/jsonpointer v0.22.1 -> v0.22.4
github.com/go-openapi/jsonreference v0.21.3 -> v0.21.4
github.com/goccy/go-yaml v1.18.0 -> v1.19.2
github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.4 -> v2.27.7
go.opentelemetry.io/collector/component/componentstatus v0.144.0 -> v0.147.0
go.opentelemetry.io/collector/component/componenttest v0.144.0 -> v0.147.0
go.opentelemetry.io/collector/confmap v1.50.0 -> v1.53.0
go.opentelemetry.io/collector/confmap/xconfmap v0.144.0 -> v0.147.0
go.opentelemetry.io/collector/connector v0.144.0 -> v0.147.0
go.opentelemetry.io/collector/connector/connectortest v0.144.0 -> v0.147.0
go.opentelemetry.io/collector/connector/xconnector v0.144.0 -> v0.147.0
go.opentelemetry.io/collector/consumer v1.50.0 -> v1.53.0
go.opentelemetry.io/collector/consumer/consumererror v0.144.0 -> v0.147.0
go.opentelemetry.io/collector/consumer/consumertest v0.144.0 -> v0.147.0
go.opentelemetry.io/collector/consumer/xconsumer v0.144.0 -> v0.147.0
go.opentelemetry.io/collector/exporter v1.50.0 -> v1.53.0
go.opentelemetry.io/collector/exporter/exportertest v0.144.0 -> v0.147.0
go.opentelemetry.io/collector/exporter/xexporter v0.144.0 -> v0.147.0
go.opentelemetry.io/collector/extension v1.50.0 -> v1.53.0
go.opentelemetry.io/collector/extension/extensionauth v1.51.0 -> v1.53.0
go.opentelemetry.io/collector/extension/extensioncapabilities v0.144.0 -> v0.147.0
go.opentelemetry.io/collector/extension/extensiontest v0.144.0 -> v0.147.0
go.opentelemetry.io/collector/featuregate v1.50.0 -> v1.53.0
go.opentelemetry.io/collector/internal/componentalias v0.144.0 -> v0.147.0
go.opentelemetry.io/collector/internal/fanoutconsumer v0.144.0 -> v0.147.0
go.opentelemetry.io/collector/internal/telemetry v0.144.0 -> v0.147.0
go.opentelemetry.io/collector/pdata v1.50.0 -> v1.53.0
go.opentelemetry.io/collector/pdata/pprofile v0.144.0 -> v0.147.0
go.opentelemetry.io/collector/pdata/testdata v0.144.0 -> v0.147.0
go.opentelemetry.io/collector/pdata/xpdata v0.144.0 -> v0.147.0
go.opentelemetry.io/collector/pipeline/xpipeline v0.144.0 -> v0.147.0
go.opentelemetry.io/collector/processor v1.50.0 -> v1.53.0
go.opentelemetry.io/collector/processor/processortest v0.144.0 -> v0.147.0
go.opentelemetry.io/collector/processor/xprocessor v0.144.0 -> v0.147.0
go.opentelemetry.io/collector/receiver v1.50.0 -> v1.53.0
go.opentelemetry.io/collector/receiver/receivertest v0.144.0 -> v0.147.0
go.opentelemetry.io/collector/receiver/xreceiver v0.144.0 -> v0.147.0
go.opentelemetry.io/collector/service/hostcapabilities v0.142.0 -> v0.147.0
go.opentelemetry.io/contrib/bridges/otelzap v0.13.0 -> v0.15.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.64.0 -> v0.65.0
go.opentelemetry.io/contrib/otelconf v0.19.0 -> v0.20.0
go.opentelemetry.io/contrib/propagators/b3 v1.38.0 -> v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.15.0 -> v0.16.0
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.15.0 -> v0.16.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.39.0 -> v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.39.0 -> v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.39.0 -> v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.39.0 -> v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.39.0 -> v1.40.0
go.opentelemetry.io/otel/exporters/prometheus v0.61.0 -> v0.62.0
go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.15.0 -> v0.16.0
go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.39.0 -> v1.40.0
go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.39.0 -> v1.40.0
go.opentelemetry.io/otel/sdk/log v0.15.0 -> v0.16.0
golang.org/x/exp v0.0.0-20251002181428-27f1f14c8bb9 -> v0.0.0-20260112195511-716be5621a96
golang.org/x/net v0.50.0 -> v0.51.0
google.golang.org/genproto/googleapis/api v0.0.0-20251222181119-0a764e51fe1b -> v0.0.0-20260128011058-8636f8732409
google.golang.org/genproto/googleapis/rpc v0.0.0-20251222181119-0a764e51fe1b -> v0.0.0-20260128011058-8636f8732409

@renovate renovate bot force-pushed the renovate/all branch 9 times, most recently from bdca8fa to 01acc69 Compare February 27, 2026 15:00
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from 04d6de5 to d89dd16 Compare March 4, 2026 18:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants